PkgRadar

Go modules · proxy.golang.org

github.com/files-com/Files-sdk-go/v3

DNS / OAST exfiltration: matched "burpcollaborator.net"

Why PkgRadar flagged v3.3.146

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "burpcollaborator.net" · github.com/files-com/files-sdk-go/[email protected]/user/fixtures/TestClient_Update.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.3.146High risk502026-06-16
v3.3.107High risk502026-05-30
v3.3.108High risk502026-05-30
v3.3.110High risk502026-05-30
v3.3.106High risk502026-05-30
v3.3.112High risk502026-05-30
v3.3.111High risk502026-05-30
v3.3.113High risk502026-05-30
v3.3.114High risk502026-05-30
v3.3.115High risk502026-05-30
v3.3.116High risk502026-05-30

Block this in CI

PkgRadar gates github.com/files-com/Files-sdk-go/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/files-com/Files-sdk-go/[email protected]
Start free — 25 scans / moView full evidence